Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39382e302f32342d3234203d3e203533313533.roa
File:                     3138362e3230392e39382e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          EcEze2ISv8/KREn5lWIPEzsTzjGsWOZ9omSAtSfdY7o=
Subject key identifier:   2B:3A:86:6A:64:CB:14:13:D5:25:EC:06:94:15:65:4D:FD:CA:10:3C
Certificate issuer:       /CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
Certificate serial:       3EF9385AC4285F3A1F50DF2CADF4CB311F813244
Authority key identifier: 85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39382e302f32342d3234203d3e203533313533.roa
Signing time:             Wed 04 Dec 2024 15:40:54 +0000
ROA not before:           Wed 04 Dec 2024 15:35:54 +0000
ROA not after:            Wed 03 Dec 2025 15:40:54 +0000
asID:                     53153
IP address blocks:        186.209.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 11:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f9:38:5a:c4:28:5f:3a:1f:50:df:2c:ad:f4:cb:31:1f:81:32:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
        Validity
            Not Before: Dec  4 15:35:54 2024 GMT
            Not After : Dec  3 15:40:54 2025 GMT
        Subject: CN=2B3A866A64CB1413D525EC069415654DFDCA103C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e8:cf:40:01:d9:ac:68:dc:f5:59:69:ef:d9:
                    9a:d7:ff:4b:93:bf:c2:53:90:80:11:d3:3d:5b:4b:
                    55:67:cb:73:a5:80:e8:14:39:6d:02:c1:a4:a3:d5:
                    cf:bc:6a:b1:eb:de:e5:85:99:9a:0a:ee:32:cd:1b:
                    c1:f9:04:9f:a7:80:66:64:a3:5e:f4:cf:29:13:ff:
                    89:c2:fd:86:34:19:72:9c:2b:bb:8f:49:e3:2d:4d:
                    88:27:0a:82:ed:66:a9:e0:74:48:b3:19:2f:76:0b:
                    db:fb:88:27:16:e3:85:74:99:05:7d:41:f3:8f:8c:
                    15:f7:b2:86:33:b3:c1:fb:02:dc:a2:6c:01:15:f1:
                    54:56:f8:5b:8c:56:06:21:37:3a:7d:a2:6b:09:0e:
                    96:c6:20:2a:db:78:7f:60:0d:4d:24:ef:b2:8e:c3:
                    4c:05:dc:33:90:ca:10:7c:c1:1a:a1:4f:57:36:0c:
                    b9:88:87:b4:55:4e:c8:5f:7a:bc:ed:04:fe:83:99:
                    25:68:4f:e7:e6:66:8e:ca:f6:1d:39:2d:0c:e9:69:
                    a8:30:c5:13:94:c5:38:03:b7:d9:91:78:f4:1e:85:
                    e1:42:94:36:67:8a:23:82:41:b9:a1:cc:31:8f:96:
                    eb:37:f5:f7:52:96:50:fc:92:62:0e:43:16:a6:32:
                    37:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:3A:86:6A:64:CB:14:13:D5:25:EC:06:94:15:65:4D:FD:CA:10:3C
            X509v3 Authority Key Identifier:
                keyid:85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39382e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:e0:69:95:66:3a:09:67:f4:ee:c3:29:23:c1:03:5e:73:9d:
         b0:b5:aa:8e:46:4b:07:43:7a:55:53:ea:38:50:a7:30:41:3c:
         b4:b2:b5:73:eb:c1:d3:55:6c:62:2d:e2:5b:8e:da:b7:8e:6f:
         e6:36:c4:fa:28:71:fc:20:da:a8:3b:43:de:96:d9:85:ba:a4:
         b1:9b:6f:73:4f:38:b2:c8:6a:57:2a:8d:16:96:f6:93:49:2f:
         18:96:df:86:06:91:38:07:01:6b:23:a6:e9:03:d6:8f:c0:f5:
         08:1f:16:b1:81:5f:54:7b:9a:2c:b6:8a:8d:7d:82:59:63:a8:
         20:af:42:71:f5:48:85:37:fc:43:03:c2:84:dd:5f:a4:b3:8c:
         cd:bf:52:dd:22:0c:e3:89:72:9a:30:94:a0:6f:10:e9:dc:90:
         35:68:d1:9e:ed:8e:16:3e:e3:f4:c1:8a:83:89:16:72:f9:80:
         e1:75:f0:6c:81:0d:56:28:01:13:14:1e:5d:52:6c:4c:bf:dd:
         ed:6e:a4:f8:b3:fc:c7:58:c3:f9:d9:69:45:d4:49:09:04:9e:
         da:4f:22:8b:e8:5f:37:4d:ef:ce:be:be:5e:84:0c:ac:e7:c6:
         a9:7d:65:94:ca:70:9b:fe:86:e7:ca:04:f8:7d:89:e4:f0:61:
         8a:ca:81:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:32:18 2025 by rpki-client